fix: pin pre-commit hooks to commit SHA

Prevent supply chain attacks from tag mutation.
Tags preserved as comments for readability.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: n24q02m

.pre-commit-config.yaml

@@ -3,7 +3,7 @@ repos:
   # Common Checks
   # ============================================================================
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v5.0.0
+    rev: cef0300fd0fc4d2a87a85fa2093c6b283ea36f4b # v5.0.0
     hooks:
       - id: trailing-whitespace
         name: trim trailing whitespace
@@ -27,7 +27,7 @@ repos:
   # Python
   # ============================================================================
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.8.6
+    rev: 89c421dff2e1026ba12cdb9ebd731f4a83aa8021 # v0.8.6
     hooks:
       - id: ruff
         name: ruff lint